Extension Details
Context-Aware Verdict
The extension has a perfect 5.0 rating, though this is based on only 2 reviews which limits reliability. With just 32 users, it has very limited adoption and community validation. The developer provides a website URL (tasklistforchrome.netlify.app) which adds some transparency, though no additional developer information is available. The extension appears to be a simple productivity tool for managing tasks.
The primary concern is the extremely low user base of only 32 users, which makes it difficult to assess real-world safety and reliability. The storage permission, while appropriate for a task management extension that needs to save user data, still presents a medium-risk factor as it allows local data storage. The lack of detailed developer information beyond a website URL reduces accountability. The small number of ratings (only 2) makes the perfect score less meaningful for risk assessment.
Given the low user adoption and limited validation, consider running this extension in a separate Chrome profile to isolate any potential risks. Before installation, verify the developer's website is legitimate and functional. Monitor the extension's behavior after installation to ensure it only accesses task-related functionality. Consider using more established task management extensions with larger user bases and longer track records if security is a primary concern. The storage permission is reasonable for this type of extension, but be aware that your task data will be stored locally.
Findings
Security Analysis Details
Required Permissions:
- storage
- sidePanel
Embedded URLs (10 total):
| https://fonts.googleapis.com | https://fonts.gstatic.com | |
| https://fonts.googleapis.com/css2?family=Inter:wght@300 | https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css | |
| http://www.w3.org/2000/svg | https://chromewebstore.google.com/detail/task-list/nhjoppdjgdbfahmjkkcdkkfolbalclme | |
| https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css | https://clients2.google.com/service/update2/crx | |
| https://github.com/anish632/task-list.co | https://tasklistco.netlify.app/privacy-policy.html |
Raw Manifest
{ "name": "Task List", "icons": { "128": "images/check3.png" }, "action": { "default_icon": { "128": "images/check3.png" } }, "version": "1.12", "background": { "service_worker": "background.js" }, "side_panel": { "default_path": "popup.html" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Task List", "permissions": [ "storage", "sidePanel" ], "homepage_url": "https://github.com/anish632/task-list.co", "privacy_policy": "https://tasklistco.netlify.app/privacy-policy.html", "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "images/check3.png" ] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.